$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d4703eb-9bbb-3c68-883a-b78430875581.roa File: 0d4703eb-9bbb-3c68-883a-b78430875581.roa (raw, json) Hash identifier: ADL7QE99q8Pc4EFGhtqGJKdafyV1m01WLDuyo2R4us0= Subject key identifier: B4:A3:F8:CA:47:B8:DE:A9:8E:5F:41:CA:A0:F9:64:B1:1B:8A:B6:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EFE29E2793E52E6CCD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d4703eb-9bbb-3c68-883a-b78430875581.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.200.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ef:e2:9e:27:93:e5:2e:6c:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e492781c-f32f-47f9-afb4-309209b5131d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:b0:d0:99:82:08:12:e3:d6:31:fc:24:cf: fb:f0:d4:d4:86:6b:e0:96:ff:0f:c0:a7:b8:2f:24: d9:db:48:2a:24:32:5a:ed:b8:00:b3:34:8b:e1:de: 16:c2:bf:6b:06:34:22:eb:f0:d7:9a:b7:6e:93:75: d4:38:f8:15:a8:35:3e:96:96:7c:f4:6e:71:a6:3d: d5:8b:08:02:51:ee:13:c5:52:aa:01:89:93:45:a5: 4d:16:d0:33:3b:d8:be:71:ad:66:80:1d:fa:ee:e8: 71:1d:7d:8b:83:27:f0:15:d3:00:4a:b8:ed:dd:e8: 04:e8:5e:76:d5:df:bd:8e:32:dc:65:51:81:e4:26: 0a:ae:ea:5f:5b:88:c9:6e:09:1a:01:ab:75:76:dc: 4c:a0:7a:1e:d9:55:6c:23:05:86:22:54:df:34:6a: b6:68:16:59:ec:d5:5a:4a:0f:1f:8a:5d:28:d6:91: 04:b1:fe:e9:6f:cf:b5:0a:c0:ea:03:18:bb:e9:6a: 34:99:c1:09:cb:58:aa:0a:b3:39:9b:e7:fe:eb:06: e8:f5:7d:4c:35:ab:0d:29:ce:05:4c:c9:85:be:ea: 9e:1e:95:b7:96:a0:0f:ab:94:98:a0:eb:66:04:b1: 1f:73:50:aa:22:50:d3:b4:99:76:3a:78:31:bb:02: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:F8:CA:47:B8:DE:A9:8E:5F:41:CA:A0:F9:64:B1:1B:8A:B6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d4703eb-9bbb-3c68-883a-b78430875581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:85:86:9a:39:1a:bc:ac:c6:1e:5d:c6:6e:cb:aa:e5:ec:f8: 2c:fd:9f:b6:7d:37:fe:71:52:b1:49:60:e8:05:5e:9b:40:bc: a1:1c:61:21:df:99:8c:f9:d4:55:c5:11:5b:21:16:ac:97:6c: 38:24:7a:dc:2e:0a:46:ae:3d:43:8c:c1:22:62:17:e5:40:ca: 67:ec:06:58:a3:90:2d:2a:ba:5c:5a:4b:29:d8:14:ea:fe:11: 58:3b:78:c3:65:3a:e3:fb:9a:4e:a0:f3:a4:c3:db:99:8e:a0: 0c:18:31:47:76:b8:ae:60:7d:8f:9b:36:a7:7d:d8:08:37:01: 4f:e9:6b:db:d4:51:39:ed:a7:f9:31:ac:cf:f8:8e:da:30:45: ad:bf:2b:ab:d6:91:15:89:39:b9:59:f1:65:c1:2f:5c:a7:4f: 1a:38:29:e2:ee:8e:8e:2c:f4:30:35:4f:c2:d7:bb:eb:1a:aa: 61:5a:93:eb:21:60:0c:d0:70:ae:bd:ef:25:9f:96:a4:0e:bd: 06:2f:39:d3:2c:90:e1:1b:ce:6d:d0:1f:64:38:41:3d:dc:b1: 11:c9:8a:ed:44:6e:50:ca:b2:77:66:2a:ba:81:77:1f:90:76: c9:20:42:d4:72:73:66:f3:c7:8a:17:73:05:54:f9:e6:6d:54: 55:1e:dc:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO/inieT5S5szYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTQ5Mjc4MWMtZjMyZi00N2Y5LWFmYjQtMzA5MjA5YjUxMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDaw0JmCCBLj1jH8JM/78NTUhmvglv8PwKe4 LyTZ20gqJDJa7bgAszSL4d4Wwr9rBjQi6/DXmrduk3XUOPgVqDU+lpZ89G5xpj3V iwgCUe4TxVKqAYmTRaVNFtAzO9i+ca1mgB367uhxHX2LgyfwFdMASrjt3egE6F52 1d+9jjLcZVGB5CYKrupfW4jJbgkaAat1dtxMoHoe2VVsIwWGIlTfNGq2aBZZ7NVa Sg8fil0o1pEEsf7pb8+1CsDqAxi76Wo0mcEJy1iqCrM5m+f+6wbo9X1MNasNKc4F TMmFvuqeHpW3lqAPq5SYoOtmBLEfc1CqIlDTtJl2OngxuwJc9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSj+MpHuN6pjl9ByqD5ZLEbirZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQ0NzAzZWItOWJiYi0z YzY4LTg4M2EtYjc4NDMwODc1NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKFhpo5Grysxh5dxm7LquXs+Cz9n7Z9N/5xUrFJYOgFXptAvKEcYSHf mYz51FXFEVshFqyXbDgketwuCkauPUOMwSJiF+VAymfsBlijkC0qulxaSynYFOr+ EVg7eMNlOuP7mk6g86TD25mOoAwYMUd2uK5gfY+bNqd92Ag3AU/pa9vUUTntp/kx rM/4jtowRa2/K6vWkRWJOblZ8WXBL1ynTxo4KeLujo4s9DA1T8LXu+saqmFak+sh YAzQcK697yWflqQOvQYvOdMskOEbzm3QH2Q4QT3csRHJiu1EblDKsndmKrqBdx+Q dskgQtRyc2bzx4oXcwVU+eZtVFUe3Gc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:02 2025 by rpki-client